Quantum chaos in the spectrum of operators used in Shor's algorithm 
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We provide compelling evidence for the presence of quantum chaos in the unitary part of the 
operator usually employed in Shor's factoring algorithm. In particular we analyze the spectrum of 
this part after proper desymmetrization and show that the fluctuations of the eigenangles as well 
as the distribution of the eigenvector components follow the CUE ensemble of random matrices, 
of relevance to quantized chaotic systems that violate time-reversal symmetry. However, as the 
algorithm tracks the evolution of a single state, it is possible to employ other operators, in particular 
it is possible that the generic quantum chaos found above becomes of a nongeneric kind such as is 
found in the quantum cat maps, and in toy models of the quantum bakers map. 



PACS numbers: 03.67.Lx,05.45.Mt 

The signatures of classical chaos in the quantum do- 
main has been of continuing interest for many years now 
and impacts various areas of physics h, _2, _3J . The recent 
developments in quantum information theory and quan- 
tum computation has also prompted studies that delve 
on the effects of chaos on quantum computers |j| and on 
entanglement |5|, a key resource in such processes. There 
have also been studies that seek efficient implementation 
of quantum chaotic models on quantum computers [fij, 
as well as, to the best of our knowledge, one study that 
seeks to see if there is intrinsic chaos in some quantum 
algorithms {[^ . Such algorithms are typically unitary evo- 
lutions, generated ultimately by Hamiltonian evolutions, 
followed by measurements. The previous study T\ fo- 
cused on the quantum Fourier transform and Grover's 
search algorithm, and several tests of quantum chaos 
were used. The evidence for quantum chaos was not un- 
equivocal due to extreme degeneracies and other unusual 
features. Besides, the quantum Fourier transform viewed 
as Weyl quantization, quantizes a ninety degree rotation 
of phase space and should therefore not be expected to 
have properties typical of quantum chaos. For any value 
of dimensionality of the transform, its fourth power is 
unity. 

On the other hand that Shor's factoring algorithm ^ 
is a candidate for quantum chaos has been indicated 
by earlier works of one of the authors 9r|. This is due 
the fact that the order finding algorithm, at the heart 
of Shor's algorithm, has a key component, the modular 
exponentiation operator, which is essentially a shift per- 
mutation operator S. This shift permutation operator 
has been shown to be metrically close to the quantum 
baker's map |lfll | , quantization of a paradigm of classical 
chaos, namely the double-sided left shift 11]. Operators 
closely allied with the shift operator may also be thought 
of as quantizing a multivalued |l2| or a random map [l3J . 
Viewed as a Weyl quantization, its action on phase space 
coherent states produces stretching and folding |2|, its 
overall periodicity makes it akin to the quantum cat map 



|l4| . The quantum cat map quantizes another classically 
fully chaotic system, the cat map .15j , however its quan- 
tum propagator is exactly periodic, with a periodicity 
that plays the role of the order in Shor's algorithm. We 
have also previously shown how to construct the quan- 
tum baker's map using the shift operator and suitable 
projectors y. 

In this Paper we examine Shor's algorithm as a whole 
and show that its unitary part has properties that one 
would normally ascribe to systems that are classically 
chaotic and for which time-reversal symmetry is broken. 
The order finding part of the algorithm _8] is quantum 
mechanical, and involves two registers containing ?ii and 
ri2 qubits respectively. We call the corresponding Hilbert 
spaces Ti.^ and TC^. The standard product basis on the 
space n^ <Si W^ is denoted as |j)|fc), < j < 2"i - 1 and 
< /c < 2"^ — 1. Shor's algorithm proceeds by using the 
following operator: 



U = [P-^ ® Id) U^ {H ® Id) 



(1) 



Here F~^ is the inverse discrete Fourier transform and 
H is the Hadamard matrix which act only on the first 
register, while Ux is the entangling part defined by its 
action on a basis vector \j)\k) as 

Ux\j)\k) = |j)|a:^fcmodiV) = \j)S^k), < k < N - 1. 

(2) 
li k > N then Ux\j)\k) = \j)\k). This defines the shift 
operator S as S\k) — \x k mod N) ioi < k < N — 1 and 
S\k) = \k) otherwise. Here N is the integer we wish to 
factor and x is an integer that is co-prime to it. 

For our study below we will take x = 2 and iV to be 
an odd integer so that we are guaranteed that an integer 
r exists such that 2'' = 1 mod TV, where r is the order 
we are seeking. Thus U acts non-trivially in an 2"^ N 
dimensional subspace of the full Hilbert space H^ (g) H^. 
Now Shor's algorithm proceeds by taking a particular ini- 
tial state |0)|1), acting on this with U and measuring the 
first register, followed by classical steps intended to find 



the order r, from which using standard number theory 
it maybe possible to find a factor of N if it exists. We 
will analyze the entire spectrum of U considered as an 
operator of dimension 2"^ N. 

We note that as the order finding algorithm needs to 
consider only action on the initial state |0) (g) |1), U is not 
the only operator that achieves the necessary result. For 
instance the first operation of a Hadamard gate on the 
qubits of the first register maybe replaced by a Fourier 
transform, as acting on |0) this also produces an equal su- 
perposition of all standard basis states: -ff|0) = F\0). In 
this case the overall unitary part of the algorithm would 
be 



U = (F-^ ® Id) aj;{F® id) 



(3) 



The eigenvalues of U are thus the same as that of Ux- 
The central operation is the modular exponentiation and 
the quantum chaos in this can be made "generic" or not 
depending on the choice of unitary operators, such as U 
or U above Il6i|. The experimental realizations of the 
Shor algorithm and order finding algorithms |l7l | that 
have been carried out so far use the Hadamard gates 
on the first register, and the operator U is of relevance 
herein. We will return to consider U later, but for now 
consider the standard operator U. 
We first notice that 



[U, Id (g>S]= 0. 



(4) 



We can label the eigenstates of U with eigenvalues of S, 
which are like good quantum numbers. The spectrum of 
S is thus of interest. As S**" = Id at, we have 



S\sj 



\sj),0<j<N~-l 



(5) 



where 6j, the eigenangle, is of the form iirk/r and 
< fc < r — 1. The eigenstates of U can be chosen 
to be \(t)i)\sj), unentangled states of the two registers. 
We show this as follows. Let H\4)i) — X^m""*!"^) ^-'^'^ 
k.>=Efc&fe|fc>- Then 

U2{H ®ld)\^i)\s,) ^U2Y,a^^k\m)\k) = 



m.k 



,6fc|m)5™|fc)=^a„ 



Ajn&i 



\m)\sj) 



\m){m\H\(bi)\s,) = iA,H(g>ld)\cf>i)\sj) (6) 



where Aj — X)m ^'"^^ l"^)('^l i^ ^ diagonal operator on 
the first register whose entries are powers of the eigenval- 
ues of S. Hence U\cJ3i)\sj) = {F-^A^H\4>i))\sj). There- 
fore \<pi)\sj) will be an eigenstate of U with eigenvalue 
Xij if 



F-'A,H\q^i)^X,i\(j)i), 0<;<2"i-l. 



(7) 



Thus we have split or block-diagonalized the full 2"^ N 
dimensional matrix diagonalization problem to that for 



N matrices of dimensions 2""^ each. There is also a de- 
pendency of the eigenstates \4>i) on the eigenangle dj, but 
we suppress this. 

The operators F~^AjH, for < j < iV — 1 are uni- 
tary operators whose eigenvalues are that of the unitary 
part of Shor's algorithm. When 9j — 0, the relevant op- 
erator is simply F~^H. This "Fourier transform of the 
Hadamard transform" was studied recently as a model of 
eigenstates of quantum chaos [l^ • It was demonstrated 
that columns of this matrix could be multifractals in the 
N ^ oo limit with peaks connected to the periodic and 
homoclinic orbits of the doubling map x i— s- 2a; modi. 
These are of relevance to the spectrum of the quantum 
baker's map. It is thus of interest that a generalized 
construction arises in the spectral problem of Shor's al- 
gorithm. 

On using the matrix elements of F^^ and the 
Hadamard matrix it is possible to write the matrix el- 
ements {F~^AjH)ki = 



ni — 1 



-n 

9n2 11 



l + (-l)' 



„-27rife2" 



19^2" 



(8) 



m=0 



where I — J2m=o ^m^™ is the binary representation of 
I. When 9j — and I = 2"^ — 1 corresponding the case 
bm — 1 for all m, this is the Fourier transform of the 
Thuc-Morse sequence |l9l. well-known to be a multifrac- 
tal in the large ni limit |2flj. Thus the matrix elements 
of F^^AjH while having a simple form that is efficient 
to compute are in fact quite complex objects. We now 
demonstrate that their spectrum has characteristics of 
that of a random matrix. 

We illustrate this with a case: rii = 10, N = 29. We 
diagonalize F~^AjH for five different values oi9j, namely 
-207r/28, 0, 47r/28, 67r/28 and 147I-/28, choosing these to 
be a mixture of generic and special eigenangles of S. The 
eigenvectors of S can also be written for example as: 



1 



E 

n=0 



exp 



'2'Kijn 



|2"modiV), (9) 



where < j < r — 1 are eigenvectors corresponding to 
eigenvalues e^'^^'H'^ . In general this is not the complete 
set, but others can be found based on subgroups gener- 
ated by other "seeds" , where the seed is the integer iq and 
the group it generates is the set of integers l^ii^ mod N 
for various k. For instance in the case A^ = 29, the above 
set generates r = 28 eigenstates of S with the seed 1. 
The remaining state is a stand-alone one with the seed 
and is the state |0) itself, with an eigenvalue 1. Thus 
apart from the double degeneracy of this eigenvalue the 
other 27 eigenvalues are non-degenerate. However this 
depends on the order r, for example if A^ = 31, r = 5 the 
spectrum of S is highly degenerate. In these cases there 
are other symmetries like bit- flip that arise [2l|, but we 
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FIG. 1: The nearest neighbor spacing distribution of eige- 
nangles from an ensemble consisting of 5115 level spacings for 
the case when the first register has 10 qubits and the num- 
ber to be factored is 29. The smooth curve shows the CUE 
distribution of random matrix theory. 
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FIG. 2: The intensities of a typical eigenstate of the operator 
F^^AjH for the same case as in Fig. Q. The complete eigen- 
state of the unitary part of Shor's algorithm being a tensor 
product of such states with eigenstates of the shift permuta- 
tion operator. 



will not elaborate on these as they are inessential to the 
central purpose of this Letter. 

It is however pertinent to point out that eigenvectors 
such as in Eq. ^ are completely delocalized, in fact have 
modulus unity for almost all components, and the phase 
would seem random. Thus these are simple examples of 
states that are ergodic in accordance with Shnirelman's 
theorem |2^ about a measure of states that tend to be er- 
godic in the classical limit for quantized ergodic systems. 
The classical limit in this case would be over integers N 
that are such that their order (with respect to 2) is iV— 1. 

Returning to the central issue, we find the nearest 
neighbor spacings (nns) of eigenangles for the five chosen 
cases thus making an ensemble with statistical signifi- 
cance. The nns is calculated for the normalized spacings 
Aaji2"'^ /2n such that the mean spacing is unity, where 
Xji — e'"^' and Aaji refers to spacings between near- 
est neighbours. In Fig. (^ we show how the nns is dis- 
tributed along with the curve expected for the Circular 
Unitary Ensemble (CUE), which consists of the unitary 
group U(n) of n X n unitary matrices endowed with its 
Haar measure |23ll. The good agreement with the CUE 
distribution [23 (which coincides with the Wigner sur- 
mise for the Gaussian ensembles for large dimensionality) 



p{s) 



32s' 



,-4sV7r 



(10) 



indicates the applicability of random matrix theory to 
the spectral fluctuations of the unitary part of Shor's al- 
gorithm. It is generally accepted that while there are 
exceptions, random matrix fluctuations are quantum sig- 
natures of classical chaos |3- In this case the classical 
limit may be considered to be the large N (or ni) limit. 



which is in fact the regime where Shor's factoring algo- 
rithm will ever be usefully implemented. 

The eigenfunctions are also of interest and in Fig. (O 
is shown a typical eigenstate of F~^AjH in the standard 
basis for the first of the five values of 9j stated above. 
Almost all of the eigenfunctions have this very random 
appearance and an analysis of the distribution of its nor- 
malized intensities x — 2^^ |(?Ti|(/>)p fits with that ex- 
pected from random matrix theory. These normalized 
intensities with unit mean are distributed in an expo- 
nential manner e^^. In Fig. (PJ we show the cumulative 
distribution, ^(x), of x and compare it to that expected 
from random matrix theory, namely 1 — e~^ J3|, and again 
find a good fit. Data not shown here confirm both the 
nns and eigenvector component statistics for a variety 
of other parameter values and states, the results shown 
being typical. Of course the complete eigenstate of the 
unitary part of Shor's algorithm is a tensor product of 
such eigenstates of random appearance with eigenstates 
of the form in Eq. (Q , which have phase complexity but 
in modulus are almost equidistributed. 

Thus there is compelling evidence that the operator \J 
used in standard implementations of Shor's algorithm has 
quantum chaos in it, of the type expected of systems that 
do not have time-reversal symmetry. The genesis of this 
is from two sources, one is the modular exponentiation 
operator, which as we have noted earlier is closely allied 
to models of quantum chaos such as the quantum baker's 
map |9j . The other is from a combination of the Fourier 
and Hadamard transforms. Thus the spectral properties 
of F^^H by itself maybe interesting. It maybe also noted 
that this is the operator relevant to the subspace 9j = 
0, which also includes the subspace left out due to the 
modular exponentiation part acting as identity on it (of 
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FIG. 3: The cumulative distribution ^{x) of the intensities 
of the eigenstate shown in Fig. ||2J, these being normalized 
so that the mean is unity. Shown as a smooth curve is the 
random matrix theory expectation 1 — e~^ . 



dimension (2"^ — iV)2"i). This last combination maybe 
made irrelevant to Shor's algorithm by making use of 
U instead of U. The operator U is exactly periodic as 
both F and U^ are. Its spectrum is highly degenerate 
and the same as the shift operator. The eigenvalues are 
thus equally spaced on the unit circle, reminiscent of the 
quantum cat maps. The use of H instead of F ([/ instead 
of U) seems to lift this nongeneric spectrum into a more 
generic one. There could be other operators that also 
accomplish order finding with different initial states, but 
the core of the algorithm, the modular exponentiation, 
will introduce quantum chaos into the system. 

There could be implications of the RMT fluctuations 
found on the practical functioning of the algorithm. In 
particular quantum chaotic systems have been found to 
have hypersensitivity to perturbations of the Hamilto- 
nian or noise [2J, |25| . It is possible that in some way the 
state used in Shor's algorithm as the initial state is "pro- 
tected" from this, but it remains to be seen whether this 
is indeed the case. For this an analysis that concentrates 
on the time evolution rather than stationary states will 
be of relevance. In particular it is of interest to investi- 
gate whether U and U are qualitatively different in their 
response to perturbations, and more generally whether 
use of the Fourier to produce equal superpositions out of 
|0) instead of the Hadamard gate is more robust. Work 
is on in these directions |2g. 

AL wishes to thank Arvind for discussions. 
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